Abstract:The prevalence of internet usage leads to diverse internet traffic, which may contain information about various types of internet attacks. In recent years, many researchers have applied deep learning technology to intrusion detection systems and obtained fairly strong recognition results. However, most experiments have used old datasets, so they could not reflect the latest attack information. In this paper, a current state of the CSE-CIC-IDS2018 dataset and standard evaluation metrics has been employed to evaluate the proposed mechanism. After preprocessing the dataset, six models—deep neural network (DNN), convolutional neural network (CNN), recurrent neural network (RNN), long short-term memory (LSTM), CNN + RNN and CNN + LSTM—were constructed to judge whether network traffic comprised a malicious attack. In addition, multi-classification experiments were conducted to sort traffic into benign traffic and six categories of malicious attacks: BruteForce, Denial-of-service (DoS), Web Attacks, Infiltration, Botnet, and Distributed denial-of-service (DDoS). Each model showed a high accuracy in various experiments, and their multi-class classification accuracy were above 98%. Compared with the intrusion detection system (IDS) of other papers, the proposed model effectively improves the detection performance. Moreover, the inference time for the combinations of CNN + RNN and CNN + LSTM is longer than that of the individual DNN, RNN and CNN. Therefore, the DNN, RNN and CNN are better than CNN + RNN and CNN + LSTM for considering the implementation of the algorithm in the IDS device.

Web Application Attack Detection Based on Attention and Gated Convolution Networks

Data anomaly detection for structural health monitoring using a combination network of GANomaly and CNN

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Anomaly-Based Web Attack Detection: A Deep Learning Approach

Anomaly-Based Web Attack Detection

Anomaly Detection Based on a 3D Convolutional Neural Network Combining Convolutional Block Attention Module Using Merged Frames

CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

Abnormal Traffic Detection Based on Attention and Big Step Convolution

Accurate Anomaly Detection Leveraging Knowledge-enhanced GAT

A High Accuracy and Adaptive Anomaly Detection Model With Dual-Domain Graph Convolutional Network for Insider Threat Detection

Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation

Attention-Guided Perturbation for Unsupervised Image Anomaly Detection

A novel architecture for web-based attack detection using convolutional neural network

Design of Network Traffic Anomaly Detection Algorithm Based on Deep Convolutional Neural Network

ResGCN: Attention-based Deep Residual Modeling for Anomaly Detection on Attributed Networks

Self-Attention Memory-Augmented Wavelet-CNN for Anomaly Detection

Object-Guided and Motion-Refined Attention Network for Video Anomaly Detection

Video Anomaly Detection Based on Attention Mechanism

Network Intrusion Detection Model Based on CNN and GRU

Network Anomaly Intrusion Detection Based on Deep Learning Approach